TrustSECO: A Distributed Infrastructure for Providing Trust in the Software Ecosystem
Publication date
2021
Authors
Hou, Fang
Farshidi, Siamak
Jansen, R.L.
Editors
Polyvyanyy, Artem
Rinderle-Ma, Stefanie
Advisors
Supervisors
Document Type
Part of book
Metadata
Show full item recordCollections
License
taverne
Abstract
The software ecosystem is a trust-rich part of the world. Collaboratively, software engineers trust major hubs in the ecosystem, such as package managers, repository services, and programming language ecosystems. However, trust entails the assumption of risks. In this paper, we lay out the risks we are taking by blindly trusting these hubs when using information systems. Secondly, we present a vision for a trust-recording mechanism in the software ecosystem that mitigates the presented risks. This vision is realized in TrustSECO: a distributed infrastructure that collects, stores, and discloses trust facts about information systems. If our community manages to implement this mechanism, we can create an urgently needed healthy and secure software ecosystem. Finally, we report on the current status of the project.
Keywords
Distributed ledger, Repository mining, Software ecosystems, Software security, Software trust, Taverne, Control and Systems Engineering, Management Information Systems, Business and International Management, Information Systems, Modelling and Simulation, Information Systems and Management
Citation
Hou, F, Farshidi, S & Jansen, S 2021, TrustSECO : A Distributed Infrastructure for Providing Trust in the Software Ecosystem. in A Polyvyanyy & S Rinderle-Ma (eds), Advanced Information Systems Engineering Workshops - CAiSE 2021 International Workshops, Proceedings. Lecture Notes in Business Information Processing, vol. 423 LNBIP, Springer, pp. 121-133, International Workshops associated with 33rd International Conference on Advanced Information Systems Engineering, CAiSE 2021, Virtual, Online, 28/06/21. https://doi.org/10.1007/978-3-030-79022-6_11, conference